Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier: faBl0GsvZi/7lEqmPTDns/zVPbhbiH8pHvFGGsTon7k=
Subject key identifier: AA:BC:13:2C:CC:15:EE:96:B1:B5:82:DC:49:EF:1E:74:85:82:3A:B9
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 0198733DB8C0E4194CA36B8B7506FCECC624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number: 0D33
Signing time: Mon 04 Aug 2025 04:01:21 +0000
Manifest this update: Mon 04 Aug 2025 04:01:21 +0000
Manifest next update: Tue 05 Aug 2025 04:01:21 +0000
Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: VvTdSdG8JtvcZAKdZUTThYiX+5dzzudZodP0/Qhv73g=)
2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:b8:c0:e4:19:4c:a3:6b:8b:75:06:fc:ec:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Aug 4 04:01:21 2025 GMT
Not After : Aug 5 04:01:21 2025 GMT
Subject: CN=aabc132ccc15ee96b1b582dc49ef1e7485823ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:ad:c3:f3:52:5f:d2:4c:c9:f4:bf:60:06:
07:ae:a4:7a:ab:41:60:2d:83:dc:02:f8:c9:b0:7e:
0f:73:36:55:91:22:5f:3a:8e:47:90:27:1e:26:5e:
58:2b:b4:42:a0:0d:14:c2:61:f5:89:30:51:37:2d:
52:b0:64:92:87:d7:4e:73:75:34:bf:72:6e:ea:12:
b1:22:47:a5:55:94:45:0c:35:29:60:f1:0f:a3:1e:
ba:f8:1c:d0:1b:b4:65:d0:d7:05:53:a6:e0:b2:0a:
ad:a7:88:a0:64:a8:12:37:ef:59:38:6d:2b:88:9a:
d8:49:b2:41:41:6f:96:ae:0b:4a:64:6a:0e:82:82:
79:11:65:d6:1a:1e:f6:17:c5:bf:ec:93:cb:3f:63:
20:ef:bc:60:bd:da:c6:37:50:d2:76:57:ae:4d:f5:
ba:af:5d:49:da:84:f3:f2:d0:40:a3:82:ec:4b:5b:
1c:30:45:9f:7a:51:2e:e3:46:02:29:7b:78:15:3a:
1e:79:18:69:09:4c:5a:18:27:30:bb:99:43:25:69:
1c:b4:cb:08:33:f6:cc:75:05:ca:26:a9:1d:00:17:
d4:ef:52:31:32:81:25:3b:4e:47:81:63:f5:d4:f3:
a9:aa:e7:38:3f:4c:22:ca:0e:46:dc:97:af:1b:9e:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:13:2C:CC:15:EE:96:B1:B5:82:DC:49:EF:1E:74:85:82:3A:B9
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:67:40:f9:5b:7c:1c:d5:ed:7c:07:e3:29:81:d7:51:be:5e:
b1:5f:c0:85:8b:09:72:5d:10:33:e7:8a:c6:3e:e6:f1:fe:b1:
5a:e6:54:d3:a6:ee:de:d8:be:20:d0:94:26:4e:29:6f:a4:2c:
16:91:c4:de:ce:4a:28:b0:96:03:38:96:42:d5:bc:f3:bf:3f:
cc:68:37:ae:28:fb:bd:35:4a:a4:dc:dc:6a:c8:f0:83:33:fe:
ad:47:46:64:8d:2c:93:df:8f:98:46:bf:99:ea:6f:c4:44:c5:
33:f0:a9:49:a0:9f:78:aa:1d:49:c0:9e:5c:b0:ae:31:0c:54:
a4:f4:fd:34:16:a8:17:3b:7f:42:90:df:8a:22:17:4a:6d:69:
49:4d:54:b1:8e:13:f0:eb:14:2c:7f:92:32:a7:1b:2f:a9:5e:
06:7a:eb:03:02:2a:cf:9c:d1:9e:6e:32:a0:0d:2a:c3:9d:c2:
3f:fd:ac:30:4c:29:08:2a:58:81:fb:09:a2:79:68:6d:bd:6d:
8c:80:1f:31:ec:b9:a9:ce:88:44:36:d9:1a:8d:08:64:98:cc:
d2:3a:df:5c:cc:2e:79:fd:41:b0:e1:f5:a7:36:47:ce:a7:e8:
e1:a1:45:24:3b:57:0b:ea:48:c5:09:d6:19:a5:48:c9:c8:f6:
b5:be:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:28 2025 by rpki-client